VulnerabilityModified
CVE-2007-6267
Citrix EdgeSight 4.2 and 4.5 for Presentation Server, EdgeSight 4.2 and 4.5 for Endpoints, and EdgeSight for NetScaler 1.0 and 1.1 do not properly store database credentials in configuration files, which allows local users to obtain sensitive information.
LOW 2.1EPSS 0.44%
Does this matter?
Lower severity and a low EPSS score (0.44%). Track it; it rarely justifies an emergency change on its own.
Description
Citrix EdgeSight 4.2 and 4.5 for Presentation Server, EdgeSight 4.2 and 4.5 for Endpoints, and EdgeSight for NetScaler 1.0 and 1.1 do not properly store database credentials in configuration files, which allows local users to obtain sensitive information.
- CVSS 2.0
- 2.1 LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 0.44% probability · 38th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-255
- Affected
- citrix/edgesight for endpoints · citrix/edgesight for netscaler · citrix/edgesight for presentation server
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/27935Vendor Advisory
- http://support.citrix.com/article/CTX115281Patch
- http://www.securityfocus.com/bid/26705Exploit, Patch
- http://www.securitytracker.com/id?1019050
- http://www.vupen.com/english/advisories/2007/4091
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38861
- http://secunia.com/advisories/27935Vendor Advisory
- http://support.citrix.com/article/CTX115281Patch
- http://www.securityfocus.com/bid/26705Exploit, Patch
- http://www.securitytracker.com/id?1019050
- http://www.vupen.com/english/advisories/2007/4091
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38861
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.